Privacy Policy
In plain English. No legal tricks.
Last updated: March 16, 2026
The Short Version
We don't sell your data. We only share it with schools if you explicitly opt in through GradFax Connect — and even then, your identity stays anonymous until you choose to respond. We don't use it for targeted advertising. We don't store your transcripts after processing them. You can delete everything at any time. That's it. That's the policy.
Why This Matters
Most college search platforms make money by selling your information to schools, advertisers, and data brokers. They collect your GPA, test scores, interests, and contact info, then package it up and sell it to the highest bidder. You become the product.
GradFax is different because our business model is different. Our revenue comes from schools who want to provide verified, transparent information about themselves, not from harvesting your personal details. The moment we sell your data, we lose the trust that makes GradFax valuable in the first place.
What We Collect (And Why)
Email Address
When: If you sign up for our newsletter or create an account.
Why: To send you updates about new features, scholarship deadlines, and application season tips.
Stored: In our database (Supabase). You can unsubscribe or delete anytime.
Search Queries
When: Every time you search for schools.
Why: To return results and improve our matching quality over time.
Stored: Sent to OpenAI for processing. We do not store your raw search queries permanently. OpenAI's API does not use your data to train their models.
Profile Preferences
When: If you fill out the student profile quiz or set preferences.
Why: To personalize your search results and match scores.
Stored: On your device (localStorage) by default. If you create an account, it syncs to your account so you can access it from any device. Your preferences never leave your device unless you choose to create an account.
Saved Schools
When: When you save or compare schools.
Why: So you can come back to them later.
Stored: On your device (localStorage) by default. Syncs to your account if you sign in.
Transcript Uploads
When: If you use our transcript analysis feature.
Why: To analyze your academic history and provide course-by-course insights.
Stored: Processed and then discarded. We do not keep your transcript after analysis is complete. If you have an account, we store the analysis results (not the transcript itself) so you can reference them later.
Basic Analytics
When: When you visit any page.
Why: To understand which features people use so we can improve them.
Stored: Google Analytics collects page visits, device type, and general location (city level, not your address). You can opt out through your browser settings or by using an ad blocker.
Payment Information
When: If you purchase a premium transcript scan ($1).
Why: To process your payment.
Stored: Processed by Square. We never see, store, or have access to your full card number. Square handles all payment security.
What We Don't Do
Sell your identifiable data to anyone. Ever.
Share any data with schools unless you explicitly opt in through GradFax Connect — and even then, it's anonymized.
Use your data for targeted advertising.
Store your transcripts after processing.
Track you across other websites.
Let schools pay to access your profile without your permission.
Use dark patterns or manipulative design to trick you into sharing more.
GradFax Connect: Opt-In Data Sharing
GradFax Connect is an optional feature that lets you share an anonymized version of your profile with universities in exchange for free access to all MyGradPath Premium tools. You must explicitly opt in — it is never automatic or pre-selected.
What Data Is Shared
- ✓Academic interests (intended majors, fields of study)
- ✓Geographic preferences (preferred regions, distance from home)
- ✓School size and type preferences
- ✓GPA range (e.g., 3.5-4.0 — not your exact GPA)
- ✓Education level (community college, 4-year, graduate)
What Is NOT Shared
- ✗Your name, email address, or phone number
- ✗Your exact GPA, test scores, or transcript data
- ✗Financial information (income, EFC, aid status)
- ✗Your identity — you stay anonymous until you choose to respond to a school
Opting Out
You can opt out of GradFax Connect at any time from your Profile settings with one click. Your anonymized profile is immediately removed from the Connect pool. No waiting period.
CCPA Compliance
Under the California Consumer Privacy Act, consumers aged 13-15 must affirmatively opt in before their personal information can be sold or shared. GradFax Connect satisfies this requirement: all users must explicitly check consent boxes and click "Activate" to participate. Consumers 16 and older also opt in through the same process.
Age Requirement & Data Retention
You must be 13 or older to use GradFax Connect. Your anonymized Connect data is retained while you are opted in. When you opt out or delete your account, Connect data is removed within 24 hours. Consent records (opt-in/opt-out timestamps) are retained for up to 3 years for compliance purposes.
Your Rights
Delete Everything
Request deletion of all your data at any time. We will remove it within 30 days.
Export Your Data
Request a copy of everything we have about you in a readable format.
Opt Out of Analytics
Use an ad blocker or browser settings to prevent Google Analytics tracking.
Unsubscribe
Every email has an unsubscribe link. One click and you are done.
Correct Your Data
If we have something wrong, tell us and we will fix it.
Ask Questions
Email us anytime. We will explain exactly what we do and why.
For California Residents (CCPA)
Under the California Consumer Privacy Act, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. The only data sharing we offer is through GradFax Connect, which requires affirmative opt-in consent — satisfying CCPA requirements for all age groups, including consumers aged 13-15. You can exercise any of your rights by contacting us.
For EU/UK Residents (GDPR)
Under the General Data Protection Regulation, you have rights to access, rectify, erase, restrict processing, and port your data. Our lawful basis for processing is legitimate interest (providing the search service you requested) and consent (for email communications). You may withdraw consent at any time. Contact us to exercise any of these rights.
Cookies
We use essential cookies to make the site work (keeping you logged in, remembering preferences) and analytics cookies through Google Analytics to understand usage patterns. We do not use advertising cookies or tracking cookies. You can block all non-essential cookies in your browser settings without affecting site functionality.
Users Under 13
GradFax is designed for students aged 16 and older. We do not knowingly collect information from children under 13. If we learn we have collected data from a child under 13, we will delete it immediately. If you believe a child under 13 has provided us with personal information, please contact us.
Third-Party Services
We use the following third-party services. Each has their own privacy policy:
Contact Us
Questions about this policy? Want to exercise your data rights? Just want to know more?
privacy@gradfax.com
GradFax LLC | Wyoming, USA
Changes to This Policy
If we make meaningful changes to how we handle your data, we will update this page and, if you have an account, notify you by email before the changes take effect. We will never retroactively change how we use data you have already shared with us under a previous version of this policy.
This policy was written by humans for humans. No legal jargon generator was involved.
© 2026 GradFax LLC. All rights reserved.